我正在使用带有Windows身份验证的身份服务器3并向用户的令牌添加声明 . 我注意到GetProfileDataAsync被调用两次，调用者是“ClaimsProviderAccessToken”，它没有任何请求的声明，“ClaimsProviderIdentityToken”是调用者 . 如何在“ClaimsProviderAccessToken”中获取RequestedClaimTypes，例如Role，Email等等？
public override Task GetProfileDataAsync(ProfileDataRequestContext context)
{
// issue the claims for the user
var user = Users.SingleOrDefault(x => x.Subject == context.Subject.GetSubjectId());
if (user != null && context.RequestedClaimTypes != null)
{
context.IssuedClaims = user.Claims.Where(x => context.RequestedClaimTypes.Contains(x.Type));
}
//NOTE: Uncomment and all the claims I need are in access token ?? Comment out and no claims in Access Token ??
//context.IssuedClaims = user.Claims;
return Task.FromResult(0);
}
这是我的范围声明请求声明在访问令牌中：
new Scope
{
Name = "api",
Enabled = true,
DisplayName = "Sample API",
Description = "Access to a simple API",
Type= ScopeType.Resource,
IncludeAllClaimsForUser = true,
Claims = new List<ScopeClaim>
{
new ScopeClaim(Constants.ClaimTypes.Name),
new ScopeClaim(Constants.ClaimTypes.Role),
new ScopeClaim(Constants.ClaimTypes.Email),
},
ScopeSecrets = new List<Secret>
{
new Secret("api-secret".Sha256())
}
}
我是否遗漏了某些东西，或者只是设置了context.IssuedClaims给用户 . 请求或者我应该通过RequestedClaimTypes提交？我真的迷失了一点试图弄清楚它是如何工作的，不确定是否设置了context.IssuedClaims = user.Claims虽然这看起来像我需要的行为???
1 回答
我实际上找到了答案，设置IncludeAllClaimsForUser = true清除声明，一旦我删除了context.RequestedClaimsTypes在请求访问令牌时不为null .